Hi, I would like to confirm how Cisco Meraki MX handles VPN connections with non-Meraki peers. In my experience, the VPN tunnel only comes up when traffic is initiated from the Meraki side. Does this mean that Meraki uses a policy-based IPSec VPN in such cases, rather than a route-based VPN? Thanks in advance for clarifying. ... View more

Hello Community, I’ve been looking into implementing Zero Trust with Cisco Meraki, and I actually went through the Cisco “What is SASE?” module on the developer site. Cisco DevNet But I felt it was somewhat abstract and didn’t get a clear picture of how to actually apply Zero Trust in a real-world Meraki deployment. So I’d like to ask: In general, what are the essential components and integrations needed (Meraki MX, MR, Systems Manager, Umbrella, Azure AD, Duo, etc.)?   Has anyone here deployed Zero Trust using Meraki and can share their architecture, lessons learned, or pitfalls? Is there a trial or demo setup I can try to see how it works in practice before deep diving? Thanks in advance for your insights! ... View more

i everyone, I’m working on a network setup where I have a Meraki MX firewall connected directly to the internet. Due to government security requirements, I need to add a second firewall between the LAN and a dedicated server segment. In this design: The Meraki MX 67 is the edge firewall connected to the internet. -> average client: 250 user  The second  Mx 85 firewall will sit between the LAN and the internal servers.  Number of server 2 hp del 380 g10 with 2 vm erp system? From the server side, this second firewall will act as the "internet gateway" (via the MX). I’m concerned about NAT behavior, routing, and potential visibility issues (like client tracking, traffic shaping, etc.) when Meraki is not the final hop to the server.   I noticed the “NAT Exceptions” / “Manual NAT” feature on Meraki, and I’m trying to understand if it can help in this case.   Question: What’s the recommended best practice for this kind of deployment using Meraki MX?Any advice or design considerations to avoid double NAT issues, maintain security, and preserve Meraki’s visibility? Thanks in advance! ... View more

Why doesn’t Meraki block VPN applications? This is ridiculous! I’ve already blocked them using the content filter, yet it still can’t use Layer 7 to properly block VPNs. This is so frustrating. What’s the point of having it if it can’t handle such scenarios? You might say it’s because of port 443, but even the most popular VPN apps aren’t getting blocked. My employees are using them freely, as if there’s no firewall in place. It’s extremely annoying ... View more

Does Systems Manager support Autopilot, or is there something similar for zero-touch configuration? ... View more

We need to make a purchase, but we want to compare first. Can someone assist me with that?   # Feature Question   Yes No Partially Notes 1 Device Enrollment & Provisioning * Does your solution support zero-touch enrollment for Android, Apple, Samsung, and Windows devices?         2 Device Inventory Management * How does your solution help us manage and track our mobile devices?         3 Policy Management * Does your solution allow us to create and enforce security and configuration policies for our mobile devices?         4 Application Management * Does your solution allow us to manage and distribute applications to our mobile devices? * Does it support app whitelisting and blacklisting?         5 Security Features * Does your solution offer remote lock/wipe capabilities? * Does it integrate with VPN and encryption solutions?         6 OS Updates & Patch Management * Does your solution automate or simplify the process of updating operating systems and installing patches on our mobile devices?         7 Compliance Monitoring * Does your solution allow us to monitor our mobile devices for compliance with company policies and security regulations?         8 Remote Troubleshooting * Does your solution offer remote troubleshooting capabilities for our mobile devices?         9 User Self-Service Portal * Does your solution offer a user self-service portal for employees to manage their devices?         10 Directory Services Integration * Does your solution integrate with Active Directory (AD) or Azure Active Directory (Azure AD) for user authentication and policy management?         11 User Training & Documentation * Does your company offer user training and documentation for your MDM solution?         12 Data Backup & Recovery * Does your solution offer data backup and recovery options for our mobile devices? * Does it integrate with OneDrive or Microsoft 365 for data backup?         13 Scalability * Can your solution scale to accommodate growth in the number of mobile devices we manage?         ... View more

Hello, I am considering using two Meraki firewalls (configured in High Availability mode) as data center firewalls to manage traffic between servers and other VLANs. I would like to know: Is it recommended to use Meraki firewalls in this role within a data center environment? What are the best practices for configuring Meraki firewalls for this use case? Are there any specific considerations or limitations I should keep in mind when implementing them in such a setup? Your insights and recommendations would be greatly appreciated! Thank you! ... View more

I have two Meraki firewalls configured in High Availability (HA) mode, with their operational mode set to "Passthrough or VPN Concentrator." When I connect devices to both the primary and secondary firewalls simultaneously, the devices work normally and receive IP addresses without any issues. It seems that the secondary firewall does not block any ports or interfere with the traffic in this setup. I would like to confirm if this behavior is normal for such a configuration, or if there might be an issue with the setup. I appreciate any insights or guidance from the community. Thank you! ... View more

hi all i need to write script for an automatic restart for mx daily evry day in spesfic time and how to use it ... View more

Hello everyone, I have two mx that are connected to each other using an AOTuO VPN, each in a different place.   On site 1 I have a hyper-V host, and on site 2 I have a replica.   Thus, in the event that host 1 goes down, how can I replicate virtual machines on site 2 using the same subnet? Can I use Meraki for this, or are there specific devices involved? what aboute vxlan and how to apply it  ... View more